How does a social media giveaway scam work?
Fake giveaway posts impersonate celebrities, brands, or official accounts to collect entry fees, personal data, or platform permissions — with no prize ever awarded.
Last reviewed: 10 June 2026
Explanation
A post appears on social media announcing a giveaway from a well-known brand, celebrity, or technology company. It offers expensive prizes — phones, holiday packages, cash — in exchange for liking, sharing, following, and tagging friends. The account running it looks official: name, profile image, and verified appearance are copied from the real entity, sometimes using a hacked verified account.
The engagement mechanics serve multiple purposes. Shares and tags spread the post organically. Follows build an audience the scammer can monetise later. A 'winner selection' link takes entrants to a page requiring email address, phone number, and sometimes credit card details for 'prize claim verification'. The data is harvested and sold or used directly for fraud.
Some giveaways instruct entrants to click a link and 'log in with Facebook/Google' — stealing OAuth tokens that grant access to the connected account. Others install browser extensions or apps as part of the entry process, which then display ads, harvest browsing data, or perform click fraud.
The prize is never awarded. The account may run many rounds of fake giveaways before being flagged and removed. The operator then starts again on a new account.
Common red flags
- A brand or celebrity announces a giveaway with prizes far exceeding normal promotional norms
- Entry requires sharing to many people before a specific date — urgency and spread are both engineered
- The winner selection link asks for credit card details or full personal information
- Logging in with a social account is required to complete entry
- The announcing account was created recently despite having a verified-looking appearance
- Clicking the entry link requests unusual app permissions
What to do now
- Verify real giveaways by checking the official verified account directly, not through a shared post
- Never enter a credit card number to claim a prize in a social media giveaway
- Revoke app and OAuth permissions you do not recognise in your social account settings
- Report fake giveaway accounts to the platform
- If personal details were submitted, monitor for phishing and identity fraud attempts
- Warn people who may have seen and shared the post
Frequently asked questions
Do real brands run social media giveaways?
Yes. Real giveaways are posted from verifiably official accounts, require only simple entry steps, never ask for payment, and winners are typically contacted privately through a verifiable channel.
Why do fake giveaways ask you to tag many friends?
Each tag spreads the post to the tagged person's network, accelerating organic reach at no advertising cost to the scammer. It also generates a pool of pre-selected warm contacts for follow-on fraud.
What is an OAuth token theft in this context?
Logging in with a social account button generates an access token. A malicious site can use this token to access your account data or post on your behalf, without your knowing your password.